Policy status: Approved and actively followed. We back up production data daily and maintain the supporting monitoring, offsite retention and recovery procedures. Effective April 11, 2026.
Purpose and scope
We keep recoverable and controlled copies of production data, configuration and essential records while protecting live systems.
This policy applies to personnel, contractors, technology and third parties acting for Pingplus Media to the extent of their approved access and applicable agreements. Customer and supplier responsibilities are aligned with our executed contracts and applicable law.
Controls and practices in operation
- We back up production data daily under our documented backup schedule, which covers full, differential or incremental copies, PostgreSQL WAL where applicable, application configuration, source artifacts and critical website data. We record backup ownership, frequency, storage location, retention and dependencies.
- We review daily backup-job completion and archive-lag status, and check repository capacity regularly. Backup failures and recovery actions are monitored and logged by responsible personnel.
- We maintain a separate offsite backup copy and control repository access, transfers, encryption configurations, key custody and retention. We distinguish repository-level encryption from other independent storage safeguards.
- We preserve required full and differential backup sets and their dependent WAL records under established retention and recovery controls. Changes to backup schedules or chains are subject to documented approval and restore assurance, while live database availability remains protected.
- We maintain an annual, controlled restore-testing programme and record recovery results against defined RTO/RPO objectives. Restore exercises are isolated from the live production database.
- We maintain recovery objectives and methodology aligned with business service tiers and supporting infrastructure. Measured exercise results are used when reporting achieved recovery performance.
Review and responsibility
Daily backup-success monitoring, regular capacity reviews and a controlled annual recovery-exercise programme are in place.
Accountability and reporting
Our personnel, contractors and in-scope service partners follow this policy, with established channels for prompt reporting of suspected security issues. Exceptions are recorded, reviewed and approved by an authorised policy owner. Applicable customer contracts and legal duties continue to govern the services provided.